Unscored severity · published Mar 19, 2006
CVE-2006-1286
Buffer overflow in the login dialog in dbisqlc.exe in SQLAnywhere for Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions Suite (SGSS) 1.0, might allow local users to…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Buffer overflow in the login dialog in dbisqlc.exe in SQLAnywhere for Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions Suite (SGSS) 1.0, might allow local users to read certain sensitive information from the database.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GS
Ghost Solutions Suite · Symantec
1.0 · source: NVD
NG
Norton Ghost · Symantec
8.0; 8.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-1286
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-1286
Vendor Advisory
http://secunia.com/advisories/19171
securityresponse.symantec.com
http://securityresponse.symantec.com/avcenter/security/Content/2006.03.07.html
securitytracker.com
http://securitytracker.com/id?1015733
www.vupen.com
http://www.vupen.com/english/advisories/2006/0870
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/25089
More from Ghost Solutions Suite
–
CVE-2015-5689
ghostexp.exe in Ghost Explorer Utility in Symantec Ghost Solutions Suite (GSS) before 3.0 HF2 12.0.0.8010 and Symantec Deployment Solution (DS) before 7.6 HF4 12.0.0.7045 performs…
–
CVE-2012-0306
Symantec Ghost Solution Suite 2.x through 2.5.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted backup file
–
CVE-2008-0640
Symantec Ghost Solution Suite 1.1 before 1.1 patch 2, 2.0.0, and 2.0.1 does not authenticate connections between the console and the Ghost Management Agent, which allows remote…
–
CVE-2007-3132
Multiple vulnerabilities in Symantec Ghost Solution Suite 2.0.0 and earlier, with Ghost 8.0.992 and possibly other versions, allow remote attackers to cause a denial of service…
–
CVE-2006-1284
The installation of SQLAnywhere in Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions Suite (SGSS) 1.0, includes a default administrator login account and password,…